Terms of Use
Last updated 18 August 2026.
By using this website you accept the terms below. If you do not accept them, please do not use the site.
Authorisation is not optional
Thornbury Labs performs security testing only with explicit written authorisation from the party that owns or lawfully controls the systems in scope, and only within rules of engagement agreed in advance.
Testing systems you do not own or have written permission to test is a criminal offence in most jurisdictions, including under the Computer Fraud and Abuse Act (18 U.S.C. § 1030) in the United States and the Computer Misuse Act 1990 in the United Kingdom. We do not perform, assist with, or condone unauthorised testing under any circumstances, and we will decline any engagement where authorisation cannot be evidenced.
What this website is
Informational, plus a way to request a quotation. Nothing on this site is an offer, a contract, or professional advice for your specific situation. Prices shown are starting fees for the published packages, not quotations for your scope. A quotation exists only when we send it to you in writing with a defined scope.
What we do not claim
We do not describe our work as a certified pentest, because no such certification exists for a test. Certifications are held by individual practitioners and accreditations by companies. We are not a CREST-accredited company. We cannot and do not guarantee that testing will identify every vulnerability. A pentest demonstrates what an attacker could achieve within the agreed scope and time.
How the work is delivered
Testing is performed by vetted independent practitioners engaged under contract to us, working under our project management, quality assurance and confidentiality agreements. You contract with Thornbury Labs, which remains accountable to you for the engagement. You are told who is assigned to your pentest before testing begins.
Intellectual property
The text, layout and graphics on this site belong to Thornbury Labs. Third-party marks shown on this site remain the property of their respective owners and their appearance does not imply endorsement.
Liability
The site is provided as is. To the fullest extent permitted by law we exclude liability for any loss arising from reliance on information published here. Liability arising from an engagement is governed by the engagement contract, not by this page.
Governing law
These terms are governed by the laws of the Commonwealth of Massachusetts, United States, without regard to conflict of law rules. Engagement contracts may specify a different governing law.
Contact
Thornbury Labs, a Quantum Group company. 1 Beacon Street, Boston, Massachusetts, United States. 169 Piccadilly, London W1J 9EH, United Kingdom.